Using threat modeling to guard against financial and Internet risks

From the bulk crawling of bilibili data by competitive products to the information leakage of Huazhu Group; from the large-scale malicious occupation of seats by East China Sea Airlines to the hornet hive travel website incident; from earning millions a day on the receiving platform to the outbreak of Singles' Day e-commerce risk. For example, business risk monitoring data in the third quarter of 2018 show that malicious crawling is

2022-06-02 Internet Technology 我要分享

CHECKPOINT releases new features in R80.3

IntroductionR80.30, part of the Check Point Infinity architecture, delivers the most innovative and

2022-06-01 Network Security 我要分享

The first one in China! Micro-step to become an AWS GuardDuty threat intelligence partner

To build cloud security, the cooperation between micro-step online and Amazon cloud technology is deepening step by step. Since the launch of micro-step threat awareness platform TDP in Amazon Cloud Technology Marketplace (China region), Micro-step online has announced that it is the Amazon Cloud Technology China region Amazo.

2023-11-24 IT Information 我要分享

The Special topic on extended threat Detection response (XDR) Technology Salon "gathering Intelligence and ingenuity" was successfully held.

Beijing, August 31-sponsored by the Cyber Security Excellence demonstration Center (hereinafter referred to as "demonstration Center of Excellence"), the "Advanced Network Security capability Assessment Series activities-extended threat Detection response" hosted by Beijing Future Zhi'an Technology Co., Ltd. (hereinafter referred to as "Future Zhian").

2023-11-24 IT Information 我要分享

Mobile application security, InfoBeat threat awareness platform for your escort

Mobile applications are fast and efficient, making them gradually shentou to every corner of our lives. Mobile application has also become an important form of enterprise business bearer, and even the only product form of many enterprises, accompanied by a variety of threats to mobile application security. Mobile applications have become h

2022-06-01 Network Security 我要分享

Practical Construction of a New Generation of domestic SOC

1 summarize the low immunity of information security is the basic current situation of information security in our country, because the detection and treatment of security threats in our country is still in the stage of manual detection and post-audit processing. In this way, compared with the current technical means such as big data's application and APT***, the risk has been examined manually.

2022-06-01 Network Security 我要分享

On the initial assumption of Security Analysis Service-knowledge Base platform

(1) background Party B's security team usually relies on Party B's own security products when providing security services for enterprises. Generally speaking, for the threat of product detection, we need analysts to check whether such a threat really exists, and there are inevitably some false positives. On the other hand, the threat is widespread.

2022-06-01 Network Security 我要分享

How to build threat Intelligence Database

How to build a threat intelligence database, I believe that many inexperienced people are at a loss about it. Therefore, this paper summarizes the causes and solutions of the problem. Through this article, I hope you can solve this problem. Foreword threat intelligence is a data-based action that predicts upcoming attacks on an organization

2022-05-31 Network Security 我要分享

Some thoughts on Security Service

Summarize some problems encountered by security service and think about (1) the main work of the security service team (1) emergency response and evidence traceability. (2) analyze and deal with the network threats in customers. (3) cooperate with the company's own products to find threats and solve network security problems. (4) pay attention to major threats

2022-06-01 Network Security 我要分享

Terminal Security Survival Guide (6)-- threat Detection and response

Threat detection and response advanced threats are designed to escape traditional signature-based AV solutions by using diversified, automatically updated, environment-aware malware, not surprisingly, old detection is based on different threat scenarios, and its evolution is very slow and uncomplex. Not long ago, safety factories only

2022-06-01 Network Security 我要分享

To deal with the emerging threat-- the release of the comprehensive monitoring system of malicious code in Guodu Xingye

Recently, the discerning eye malicious code integrated monitoring system of Guodu Industrial Company has been officially released. This product is a new generation of national capital Xingye multi-dimensional monitoring system to deal with network security threats under the new situation, which can realize the whole life cycle monitoring of security threats, in the malicious code stage, latent stage and * stage.

2022-06-01 Network Security 我要分享

The leak of the mole is fiercer than the hacker! How to protect the world inside the firewall?

You can build a wall, set up comprehensive defenses, and spend a lot of manpower and resources to maintain it in order to resist threats. However, if your enemy comes from within, then the wall is in vain. The struggle against the internal enemy is a smoke-free but still serious war. At the end of April, Meituan, ele.me and Baidu

2022-06-01 Network Security 我要分享

Where will the next move in the ten-year game with APT go?

When it comes to APT attacks, I believe people in the industry are already very familiar with them. APT is not a new term, especially in recent years, APT attacks pose a serious threat to the normal operation of enterprise business. Someone once said that there are two kinds of enterprises in the world. One is to know that their own enterprises have been hacked.

2022-06-01 Network Security 我要分享

Without exception, all companies are threatened by insiders.

The prevalence of insider threats is a major concern for every company. According to the threat assessment of a number of companies around the world, the Dtex 2018 threat report, Dtex Systems concluded that all companies have blind spots and insider threats are repeatedly banned. This is not necessary.

2022-06-01 Network Security 我要分享

Threat Classification STRIDE

Threat classification STRIDER:STRIDE is a tool developed by Microsoft for threat modeling, which divides external threats into six categories, as follows: S:spoofing, deceiving T:tampering, tampering with R:repudiation, denying, denying I.

2022-06-01 Network Security 我要分享

Internet of things penetration test threat modeling to capture application-related security risks

Today, information technology is advancing by leaps and bounds, which has a profound impact on many fields, such as politics, economy, society, culture, military and so on. Internet technology is integrated into all aspects of life, and has already changed people's way of life. At the same time, network attacks are increasing day by day, and security protection is always one of the network security protection.

2022-06-02 Internet Technology 我要分享

AirTight WIPS

The infrastructure of AIRTIGHT WIPS Wireless Local area Network (WLAN) is one of the most important and direct threats in current enterprise networks. To make matters worse, the Wi-Fi demand for personal smartphones and tablets is flooding businesses, inadvertently violating network security

2022-06-01 Network Security 我要分享

AD domain change audit software-simplifies system threat detection through user behavior analysis

With the progress of science and technology, the rapid development of network popularity, network threats are increasing, violations are becoming more and more common. Many companies rely on technology to protect themselves, but people also use technology to find ways to circumvent these defenses. As artificial intelligence enters the field of technology, enterprises need to have sufficient ability to

2022-06-02 Servers 我要分享

5 years focus on Huaqing Principal an XDR safe Operation Landing Plan 6.0 era has come

With the digital transformation and the development of network security, traditional security can not effectively deal with complex network attacks and potential threats. In view of this, Gartner proposes a future-oriented adaptive security architecture for advanced attacks to build security capabilities from four dimensions: prediction, defense, detection and response.

2023-11-24 IT Information 我要分享

Berry dandelion network, how to apply SASE to ensure the security of enterprise network?

With the popularity of hybrid cloud and mobile office, enterprise networks are facing an increasingly complex security threat environment. Large enterprises have sufficient capacity and budget to build customized network security solutions that cover all personalized needs. However, for the majority of small and medium-sized enterprises, due to the actual business development, it is difficult for them to deploy

2023-11-24 IT Information 我要分享